Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/rM0hdOlDq5PjUPlYQjwrdmsNgLk.roa
File: rM0hdOlDq5PjUPlYQjwrdmsNgLk.roa (raw, json)
Hash identifier: P5bHUSJ/DNBPtHaciNXDjZj4B3+zVgvOitqg9pu/qNk=
Subject key identifier: AC:CD:21:74:E9:43:AB:93:E3:50:F9:58:42:3C:2B:76:6B:0D:80:B9
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 018B655E887B4E8FA8F89C5800BBF921C7C4
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/rM0hdOlDq5PjUPlYQjwrdmsNgLk.roa
Signing time: Wed 25 Oct 2023 05:46:15 +0000
ROA not before: Wed 25 Oct 2023 05:46:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60656
IP address blocks: 78.128.64.0/24 maxlen: 24
78.128.68.0/23 maxlen: 23
78.128.65.0/24 maxlen: 24
78.128.70.0/23 maxlen: 23
185.149.105.0/24 maxlen: 24
185.149.104.0/24 maxlen: 24
185.149.107.0/24 maxlen: 24
185.149.106.0/24 maxlen: 24
78.128.33.0/24 maxlen: 24
78.128.32.0/24 maxlen: 24
78.128.35.0/24 maxlen: 24
78.128.34.0/24 maxlen: 24
78.128.44.0/24 maxlen: 24
78.128.47.0/24 maxlen: 24
78.128.46.0/24 maxlen: 24
78.128.45.0/24 maxlen: 24
78.128.51.0/24 maxlen: 24
78.128.50.0/24 maxlen: 24
78.128.49.0/24 maxlen: 24
78.128.48.0/24 maxlen: 24
130.185.252.0/24 maxlen: 24
79.124.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:5e:88:7b:4e:8f:a8:f8:9c:58:00:bb:f9:21:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Oct 25 05:46:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=accd2174e943ab93e350f958423c2b766b0d80b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:1e:8a:5a:dd:37:21:fe:f8:f9:7b:9f:be:
ea:82:f7:61:c6:b7:09:7d:9a:80:7b:a4:a3:48:38:
ce:de:92:a1:6e:0f:7b:94:fe:8c:f0:c1:81:7c:74:
a9:60:25:08:1b:77:5c:1f:1a:c0:64:a0:92:c9:8c:
c9:27:ab:b8:30:90:30:df:86:34:1d:a2:4c:f9:3e:
fc:64:76:0d:0a:d7:b8:96:d5:8f:27:27:7d:ad:0a:
e6:0b:5c:0c:d5:b0:ba:f8:d5:1b:97:f9:bf:dd:8b:
6c:20:41:4f:42:2c:ab:86:54:e2:fa:de:9c:64:37:
13:28:68:95:31:2c:ff:60:8b:4a:e1:47:51:40:5b:
00:59:f8:5b:5b:36:f9:5d:5f:6b:8e:9a:1f:a9:c9:
78:e7:cf:ba:36:c0:dd:1e:9d:7f:0b:38:87:a5:2f:
d7:85:82:4e:33:d8:9d:7f:15:ca:5c:ec:4c:f2:86:
0f:87:c7:3a:59:d1:21:fd:fd:db:13:df:1f:c6:f2:
88:c6:8c:a4:21:6b:33:72:35:eb:c9:ef:ec:63:2a:
35:ab:39:65:22:21:15:eb:2d:ef:2d:95:18:e9:0a:
40:20:30:45:bb:6f:0e:81:0e:e4:29:2f:7e:fb:a8:
21:d1:89:b7:1d:60:6f:92:56:73:06:c4:a1:fc:31:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CD:21:74:E9:43:AB:93:E3:50:F9:58:42:3C:2B:76:6B:0D:80:B9
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/rM0hdOlDq5PjUPlYQjwrdmsNgLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.32.0/22
78.128.44.0-78.128.51.255
78.128.64.0/23
78.128.68.0/22
79.124.85.0/24
130.185.252.0/24
185.149.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:34:40:15:ea:f2:d3:d7:ce:0f:ff:11:15:36:2b:15:82:13:
02:a2:c6:4e:52:dd:7b:19:9c:e7:88:33:7c:7c:3f:62:23:1a:
fa:b7:6b:ad:76:38:32:dd:07:2e:69:f8:42:94:50:52:2e:f7:
78:43:c4:8c:6c:ec:d6:81:10:91:1d:82:83:b7:94:13:19:1e:
98:27:08:07:72:06:04:41:ab:aa:3c:e7:99:a9:69:b9:66:bd:
56:dd:08:8d:47:c3:39:40:8c:10:dd:05:58:3b:6e:20:f7:aa:
cd:c9:31:f3:2d:fd:d7:28:12:ae:0c:8a:5d:51:ea:11:ab:6e:
b0:f9:1a:ed:01:d9:e8:0e:c4:f3:7f:64:77:7c:1c:c3:e6:3c:
36:25:95:2d:16:91:06:e7:25:3f:25:c8:62:3a:ad:7e:13:89:
26:e4:53:a5:27:ff:80:bd:34:f1:3d:9c:b7:c8:e4:12:00:56:
62:55:dc:ef:bb:51:1e:a3:cd:31:bd:16:52:cf:17:b0:a1:d1:
85:84:c2:53:13:e1:4b:cc:c8:42:92:78:ac:cc:02:87:35:8a:
fb:3b:5b:1d:ae:12:dd:23:e2:9f:d8:b3:15:03:fb:fc:fe:68:
3f:d6:f3:6b:42:4a:55:fc:3d:8e:ec:b9:64:df:ff:ae:da:77:
f7:69:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:56:40 2025 by rpki-client